Is @better-auth/scim safe to use?

@better-auth/scim has 1 known vulnerabilities on the latest version (1.6.26). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of @better-auth/scim?

The latest version of @better-auth/scim is 1.6.26, released 2026-08-04.

Does @better-auth/scim have known vulnerabilities?

Yes. @better-auth/scim has 1 known vulnerabilities. See depscope.dev/pkg/npm/@better-auth/scim for details.

Is @better-auth/scim deprecated?

No, @better-auth/scim is actively maintained. Latest release: 1.6.26 (2026-08-04).

What are alternatives to @better-auth/scim?

Popular alternatives to @better-auth/scim in npm include: ?, semver, debug, ansi-styles, brace-expansion.

What license does @better-auth/scim use?

@better-auth/scim is licensed under MIT.

depscope

Packages

Integrate API Docs Curator Benchmark Coverage

Related on DepScope

Alternatives

@jack-miller/better-auth-scim— SCIM plugin for Better Auth
scim-patch— SCIM Patch operation (rfc7644).

All npm packages →
Breaking changes index →
Bug index →
AI hallucination corpus →

depscope/npm/@better-auth/scim

@better-auth/scim

npmv1.6.26

SCIM plugin for Better Auth

License MITpermissive124 versions2 maintainers1 deps62,855 weekly dl

better-auth/better-auth

/ 100

Health

update required

@better-auth/[email protected] has vulnerabilities — update to latest

Update to >= 1.7.0-beta.4 to fix known vulnerabilities

DepScope

Package intelligence for AI agents. 19 ecosystems.

Resources

API Documentation Hallucination Benchmark For Enterprise Swagger / OpenAPI Popular Packages Coverage AI Plugin Setup Watch the pitch (60s)

Legal

Legal hub Privacy Policy Terms of Service Cookie Policy Acceptable Use Attribution DPA Sub-processors Security ImprintContact 中文

Moderate health score (60/100) — verify manually

1 high severity vulnerabilities

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

20/25

security

15/15

maturity

11/15

community

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2026-67331	@better-auth/scim: Account/provider takeover via missing owner binding on non-org SCIM providers	1.7.0-beta.4

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

zod

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@better-auth/scim